Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SAASINT-3691] DDS: Ivanti nZTA: Crawler Integration v1.0.0 #19583

Open
wants to merge 20 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from 15 commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/CODEOWNERS
Original file line number Diff line number Diff line change
Expand Up @@ -463,6 +463,11 @@ plaid/assets/logs/ @DataDog/saa
/zero_networks/manifest.json @DataDog/saas-integrations @DataDog/documentation
/zero_networks/assets/logs/ @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-backend @DataDog/logs-core

/ivanti_nzta/ @DataDog/saas-integrations
/ivanti_nzta/*.md @DataDog/saas-integrations @DataDog/documentation
/ivanti_nzta/manifest.json @DataDog/saas-integrations @DataDog/documentation
/ivanti_nzta/assets/logs/ @DataDog/saas-integrations @DataDog/documentation @DataDog/logs-backend

/forcepoint_security_service_edge/ @DataDog/saas-integrations
/forcepoint_security_service_edge/*.md @DataDog/saas-integrations @DataDog/documentation
/forcepoint_security_service_edge/manifest.json @DataDog/saas-integrations @DataDog/documentation
Expand Down
2 changes: 1 addition & 1 deletion ivanti_nzta/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# CHANGELOG - ivanti-nzta

## 1.0.0 / 2025-01-30
## 1.0.0 / 2025-02-14

***Added***:

Expand Down
72 changes: 54 additions & 18 deletions ivanti_nzta/README.md
Original file line number Diff line number Diff line change
@@ -1,43 +1,79 @@
# Agent Check: ivanti-nzta
# Ivanti nZTA

## Overview

This check monitors [Ivanti Neurons for Zero Trust Access (nZTA)][1], which is is a SaaS-delivered zero trust network access solution designed to work with VPN or cloud-first organizations.
[Ivanti nZTA][1] is a cloud-based SaaS solution offering zero-trust authentication and access control for application infrastructures. It enables administrators to define policies for secure user and device access. This ensures application visibility, access control, and robust security.

This integration ingests the following logs:

- **Analytics Logs**: This endpoint contains information about system activity through Admin Logs, Access Logs, and Event Logs.
- **Alerts**: This endpoint contains information about alerts triggered by Ivanti nZTA, including security risks, and configuration changes.
- **Application Access**: This endpoint contains information about application accessed by users.

This integration collects logs from the sources listed above and sends them to Datadog for analysis with our Log Explorer and Cloud SIEM products

- [Log Explorer][3]
- [Cloud SIEM][4]

## Setup

### Installation
### Generate API credentials in Ivanti nZTA

#### Create a new Admin User

1. Log in to your Ivanti nZTA platform.
2. Go to **Secure Access** > **Manage Users**
3. Navigate to **Authentication Servers** tab.
4. Under the **Admin Auth**, Click on **Create User** and enter the following details:
- **Full Name**: Enter a descriptive and identifiable name.
- **User Name**: Enter a unique username.
- **Password**: Enter a strong password.
- **Confirm Password**: Re-enter the password.
5. Uncheck the **Temporary password** checkbox.
6. Click on **Create User** to create the user.

The ivanti-nzta check is included in the [Datadog Agent][2] package.
No additional installation is needed on your server.
**Note**: Use a newly created admin user only for this integration and not for UI login to ensure smooth execution.

### Configuration
#### Identify the Host

!!! Add list of steps to set up this integration !!!
1. To identify the host of your Ivanti nZTA, check the Ivanti nZTA platform URL.
<br>**For example**: example.pulsezta.net

### Validation
### Connect your Ivanti nZTA Account to Datadog

!!! Add steps to validate integration is functioning as expected !!!
1. Add your Host, Username, and Password.

| Parameters | Description |
| ---------- | ------------------------------------------------------- |
| Host | The Host of your Ivanti nZTA platform. |
| Username | The Tenant Admin Username of your Ivanti nZTA platform. |
| Password | The Password of your Ivanti nZTA platform. |

2. Click the Save button to save your settings.

## Data Collected

### Logs

The Ivanti nZTA integration collects and forwards analytics logs, alerts, and application access logs to Datadog.

### Metrics

ivanti-nzta does not include any metrics.
The Ivanti nZTA integration does not include any metrics.

### Service Checks

ivanti-nzta does not include any service checks.
The Ivanti nZTA integration does not include any service checks.

### Events

ivanti-nzta does not include any events.

## Troubleshooting
The Ivanti nZTA integration does not include any events.

Need help? Contact [Datadog support][3].
## Support

[1]: **LINK_TO_INTEGRATION_SITE**
[2]: https://app.datadoghq.com/account/settings/agent/latest
[3]: https://docs.datadoghq.com/help/
Need help? Contact [Datadog support][2].

[1]: https://www.ivanti.com/products/ivanti-neurons-zero-trust-access
[2]: https://docs.datadoghq.com/help/
[3]: https://docs.datadoghq.com/logs/explorer/
[4]: https://www.datadoghq.com/product/cloud-siem/
Loading
Loading